Ledger says all confirmed hardware implant attack cases came through the CryptoBilis distribution channel, with a limited number of affected devices

Article

Ledger Update on the hardware implant attack: the number of affected devices is limited, and all confirmed cases came from the distributor

BlockBeats reports that October 12, the hardware wallet manufacturer Ledger released a 72-hour update on the hardware implant attack, stating that it is cooperating with the relevant authorities to continue the investigation. The number of affected devices is limited, and affected users have been contacted proactively. All confirmed cases related to the theft incidents disclosed by October 9 involved devices sold through the Southeast Asian distributor CryptoBilis.Ledger emphasized that its own systems and direct-sales channels were not affected. CryptoBilis has confirmed that it has stopped selling all hardware wallets.Ledger advises users who purchased devices from CryptoBilis: do not initialize uninitialized devices; if setup has already been completed, transfer assets to a new seed. Users with concerns can contact support through the official website; the support team is 24/7 online.Ledger also reminds authorized dealers and distributors to purchase only through authorized channels, never relist returned products, and advises users not to purchase from unauthorized distributors.Ledger emphasizes that the official team will never proactively call, send direct messages, or request a 24-word recovery phrase.

Original link https://m.theblockbeats.info/flash/371249

Key points

Ledger issued a October 12-hour update on the hardware implant attack 72.
Ledger said that the number of affected devices is limited and that affected users had been contacted proactively.
All confirmed cases related to the theft incidents disclosed by October 9 involved devices sold through the Southeast Asian distributor CryptoBilis.
Ledger said that its own systems and direct-sales channels were not affected.
CryptoBilis has confirmed that it has stopped selling all hardware wallets.
Ledger advises users who purchased uninitialized devices from CryptoBilis not to initialize them; users who have completed setup should transfer assets to a new seed.
Ledger reminds users that the official team will never proactively call, send direct messages, or request a 24-word recovery phrase.

AI-assisted interpretation

The following is analysis, separate from reported facts. Verify important claims independently.

This is an update on a hardware wallet supply-chain security incident.Ledger stated that the currently confirmed related cases all involved devices sold by CryptoBilis and advised affected users to pause initialization or transfer assets to a new seed.

Why it matters to readers

Users who purchased Ledger devices from CryptoBilis should handle the devices according to Ledger’s recommendations and beware of contacts requesting a 24-word recovery phrase.

Hardware wallets are used to manage digital assets; if a recovery phrase is exposed, assets may be put at risk.

Risks and unknowns

The investigation is ongoing, and the materials do not state whether more affected devices or cases will be confirmed.
The materials do not provide the specific affected models or batches.
The materials do not state the arrangements for recalling, verifying, or disposing of the devices concerned.
The original text was relayed by BlockBeats and does not provide the Ledger original announcement link.

Ledger says all confirmed hardware implant attack cases came through the CryptoBilis distribution channel, with a limited number of affected devices

Article

AI-assisted interpretation

Why it matters to readers

Risks and unknowns

Related Developments

Related concepts

Keep following

Security Center